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January is an ideal month for us to reflect 
on the successes of the past year, as we 
plan to meet the challenges that the new 
year will present. The most recent devel- 
opment that presents a major challenge is 
the proclamation of the Municipal Free- 
dom of Information and Protection of Pri- 
vacy Act and the amendments to 
Ontario’s Freedom of Information and 
Protection of Privacy Act. 


The Municipal Freedom of Information 
and Protection of Privacy Act, 1989 was 
unanimously enacted on December 14, 
1989, one full year ahead of the implem- 
entation date. Asa Bill, it moved quickly 
through the Ontario Legislature: First 
Reading on July 20, 1989 followed by 
Second Reading on October 10. 


We are very pleased that the Municipal 
Freedom of Information and Protection of 
Privacy Act has been modified to take into 
account the particular circumstances of 
municipal corporations and local boards. 
AS we see it, two important distinctions 
are made in the Act: “head” is defined ina 
purely municipal context; and “draft by- 
laws”, as opposed to “cabinet records”, 
are deemed an exemption under the Act. 


The Freedom of Information and Protec- 
tion of Privacy Amendment Act, 1989 
amends certain sections of the provincial 
Act, specifically sections 17 and 67. These 


- amendments will be discussed further ina 


future issue of this newsletter. 


1989 has been a particularly successful 
year for our agency. We succeeded in issu- 
ing 102 orders involving 118 appeals, and 
based on a preliminary review our Ap- 


peals Officers succeeded in resolving 244 
other appeals through mediation. 


During the year, we also issued two policy 
initiatives for provincial government of- 
fices subject to the Freedom of Informa- 
tion and Protection of Privacy Act concern- 
ing the use of facsimile machines, and the 
treatment of HIV/AIDS-related personal 
information in the workplace. 


In June, we issued “Guidelines on Fac- 
simile Transmission Security”. The docu- 
ment addresses the use of facsimile ma- 
chines and encourages security measures. 
It recommends follow-through proce- 
dures and provides guidance on the 
proper location and operation of the fax 
machine in an Office. Targeted primarily 
at provincial government ministries and 
agencies who are subject to the Act, it 
discourages the transmission by fax of 
personal information and exempt rec- 
ords. 


To the best of our knowledge, this initia- 
tive is the first in North America to ad- 
dress the broader privacy issues to be 
considered when using facsimile ma- 
chines. The response has been over- 
whelmingly favourable. If you have not 
already obtained a copy and would like 
one, please contact this office. 


The second policy initiative, issued in 
December by our Office, is entitled “HIV/ 
AIDS in the Workplace”. The contents of 
this initiative, with particular emphasis 
on 12 workplace privacy principles ad- 
dressing this sensitive topic, are detailed 
in this issue’s feature article. 


Our plans for 1990 include hosting the 
Second Annual “Privacy Summit” - with 
representatives from the federal and 
Quebec jurisdictions - and implementa- 
tion of an office reorganization in prepa- 
ration for the extension of freedom of 
information and protection of privacy 
legislation to local government agencies. 


In February, I will host the Second An- 
nual “Privacy Summit”. In attendance 
will be John Grace, Privacy Commis- 
sioner of Canada, Jacques O’Bready, 
President of the Quebec Commission, 
and representatives from all three of our 
offices. The agenda will include several 
timely privacy issues, and I hope to share 
the highlights of the summit in the April 
issue of this newsletter. 


Plans are underway for our office’s reor- 
ganization and expansion. As of 1991 we 
will be serving 3,000 local government 
agencies in addition to provincial minis- 
tries and agencies and we want to be sure 
that our organizational structure will al- 
low us to meet these new demands. 


Iconsider 1989 to have been a particularly 
successful year here at the Office of the 
Information and Privacy Commissioner 
as wellas for those involved in the admini- 
stration of freedom of information and 
protection of privacy legislation across 
the province. I would like to take this 
opportunity to thank the staffat my office, 
our colleagues at the Freedom of Infor- 
mation and Privacy Branch, Management 
Board of Cabinet, and all the Co-ordina- 
tors across the province for their contin- 
ued assistance and cooperation. 


The occurrence of HIV/AIDS in our soci- 
ety --a deadly disease with no vaccine or 
known cure -- has raised a series of pro- 
found dilemmas. Whether the dilemmas 
are ethical, legal, medical or social, a fun- 
damental issue that arises is how to deal 
with sensitive HIV/AIDS-related per- 
sonal information. The concerns raised 
by employers, employees and those in- 
fected with HIV/AIDS are numerous: 
they range from questions about HIV/ 
AIDS and how it is transmitted, to 
whether employers and fellow employees 
need to know the status of an HIV/AIDS 
infected person’s health. 


One of the Information and Privacy 
Commissioner’s responsibilities under 
the Freedom of Information and Protec- 
tion of Privacy Act, 1987 is to ensure that 
personal information held by government 
about any individual is adequately pro- 
tected. The protection of an individual’s 
personal information about HIV/AIDS is 
critical given society’s misconceptions 
about HIV/AIDS and the possible conse- 
quences for the individual concerned if 
HIV/AIDS-related personal information 
is misused. 


Policy development on HIV/AIDS as it 
relates to the Act is ongoing at the Com- 
missioner’s office. In December 1989, the 
office released “HIV/AIDS in the 
Workplace”, the first of two policy initia- 
tives addressing HIV/AIDS. Based on 
the workplace principles recommended 
in this report, the Commissioner’s office 
has adopted its own workplace policy on 
HIV/AIDS. 


“HIV/AIDS in the Workplace” recom- 
mends several privacy principles for 
employers and employees to follow when 
dealing with HIV/AIDS-related personal 
information. The workplace policies 
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indicate that the Act neither provides 
grounds for the mandatory collection of 
HIV/AIDS-related personal informa- 
tion; nor requires employees to provide 
such information as a condition of secur- 
ing or continuing employment. The poli- 
cies encourage employers to establish 
education programs in the workplace: 
provide information on how the disease is 
transmitted; warn of the possible conse- 
quences of improper collection, use and 
disclosure of HIV/AIDS-related personal 
information; and advise of the protection 
provided by the Act for such personal 
information. 


The report recommends that HIV/AIDS- 
related personal information volun- 
teered by the infected person or by a third 
party should not generally be retained. If 
collected, it is imperative that strict secu- 
rity measures be taken to ensure the con- 
tinued confidentiality of the information. 


The report urges organizations who must 
collect HIV/AIDS-related personal in- 
formation to permit the affected person 
access to his or her records, and the ability 
to challenge their accuracy if necessary. 


The remaining privacy principles cited in 
the report deal with the Act and how the 
Act restricts the use and disclosure of 
HIV/AIDS-related personal informa- 
tion. 


The report also discusses at length the 
ways in which HIV is transmitted and 
makes it clear that it cannot be transmit- 
ted by casual contact. Any fears employ- 
ees may have of working with an HIV/ 
AIDS infected person should be allayed, 
as normal workplace conditions do not 
provide an environment for HIV trans- 
mission. The report also explains the 
adverse consequences of disclosing HIV/ 
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AIDS-related personal information, and 
shows why such information should be 
treated with utmost confidentiality. 


“HIV/AIDS in the Workplace” is primar- 
ily intended for ministries, agencies, 
boards and commissions of the Ontario 
Government. They are encouraged to 
adopt the principles as part of their gen- 
eral workplace policies on HIV/AIDS. 
The report can, however, be adapted for 
use by the private sector. 


The privacy principles outlined in “HIV/ 
AIDS in the Workplace” are the basis for 
the workplace policy adopted by the 
Commissioner’s office. The IPC 
Workplace Policy has been submitted to 
the Ontario government’s Interminis- 
terial Working Group on AIDS for for- 
mal approval. 


In 1990, the Commissioner’s office will 
release a second policy initiative discuss- 
ing HIV/AIDS. This report will address 
the broader privacy issues relating to the 
collection, use and disclosure of HIV/ 
AIDS-related information. It will also 
discuss this office’s policy recommenda- 
tions On anonymous testing, mandatory 
reporting, contact tracing and partner 
notification. 


The Information and Privacy Commis- 
sioner’s mandate is to ensure adequate 
protection of an individual’s personal 
information that is held by government. 
Considering the extremely sensitive na- 
ture of HIV/AIDS-related personal infor- 
mation and the possible adverse conse- 
quences of misuse of that information for 
the individual concerned, this office will 
continue to monitor and study the issue of 
HIV/AIDS-related personal informa- 
tion. 


The publication of Protecting Privacy in 
Surveillance Societies, by David H. 
Flaherty, Professor of History and Law at 
the University of Western Ontario, and 
an international expert on data protec- 
tion and privacy, is highly welcome. The 
book’s 483 pages discuss and analyze the 
status of data protection and privacy laws 
in West Germany, Sweden, France, Can- 
ada, and the United States. Professor 
Flaherty comprehensively details how 
each country has dealt with the threats 
posed to informational privacy by the 
increasing use of new technologies, espe- 
cially computers, in the publicand private 
sectors. 


The book’s contention is that the advent 
of ‘surveillance societies’, in which all of 
one’s personal information is collected 
and used by governments, and by just 


about everyone else, is very real. In 
Flaherty’s words: “Western industrial 
societies run the increasing risk of becom- 
ing - or may already be - surveillance so- 
cieties, as one component of being infor- 
mation societies.” 


Despite the trend toward government 
deregulation of most types of public and 
private activity, Flaherty argues that we 
need more rather than less privacy and 
data protection laws. He sees government 
agencies, as the “leading invaders of the 
personal privacy of citizens, since they 
maintain systems with the largest scope 
and most numerous records.” 


In response, the book argues that regula- 
tory schemes must be strengthened, so as 
not to give an illusion of surveillance 
control. Among other things, Flaherty 


recommends that “ data protectors ... 
pursue audits with vigor in order to moni- 
tor compliance with fair information 
practices.” He feels so strongly about the 
danger of paying only lip-service to pri- 
vacy issues that he recommends that pri- 
vacy protection be enshrined as a consti- 
tutional right. 


The merit of the book is that it provides 
both the details of how data protection 
schemes operate in the major democra- 
cies and, at the same time, raises funda- 
mental questions about our prospects for 
privacy as we head toward the 21st cen- 


tury. 
John Eichmanis 


(The book is published by the University of 
North Carolina Press, 1989.) 


Upcoming Seminars and Conferences 


April 23 and 24, 1990 


ACCESS ’90: Focussing on Daily Access/Privacy Issues, to be 
heldin Ottawa. This two-day conference is being presented by 
The Canadian Access and Privacy Association and organized 
by Riley Information Services Inc. For details, contact: Tom 
Riley, Riley Information Services, P.O. Box 261, Station F, 


May 18, 1990 | 


Toronto, Ontario M4Y 2L5. Phone: (416) 593-7352 


A one-day seminar, to be held in Toronto, for local govern- 
ment agencies, covering freedom of information and protec- 
tion of privacy legislation. For details, contact: EDU-LAW 
Consulting Services Limited, 1 Gloucester Street, Suite 109B, 
Toronto, Ontario M4Y 1L8. Phone: (416) 323-0358. 


If you wish to advise readers of an upcoming seminar or conference covering 
freedom of information and privacy issues, please contact our office. 


New Procedures 
for 
Appeals 


At the inception of the Freedom of Informa- 
tion and Protection of Privacy Act, 1987, the 
IPC Appeals Department was faced with 
the simultaneous challenges of coping with 
a large number of appeals, and with devel- 
oping procedures as to how these appeals 
would be processed. After two years we are 
still faced with appeals which introduce 
novel circumstances; however, we have 
devised a general procedure for handling 
appeals. Modifications occur to suit the 
circumstances of the wide range of issues 
that arise under the Act, but certain steps 
occur in all appeals. 


On November 27, 1989 the IPC Appeals 
Department began sending an Outline of 
Procedure used by the Commissioner’s of- 
fice in the processing of an appeal to every- 
one who receives a Notice of Appeal. This 
Outline is intended to give parties to an 
appeal a general overview of the events that 
take place in most appeals. 


In addition to the Outline, institutions will 
find a two-page Guideline attached to their 
Notices of Appeal. The Guideline reminds 
institutions that the Appeals Department 
will routinely need to see copies of records 
to which full access has been refused, as well 
as relevant correspondence. It also advises 
of the information which the Appeals De- 
partment (and eventually the Commis- 
sioner) will need about the institution’s 
decision and howit applies to the particular 
records concerned in the appeal. 


It is hoped that routine business connected 
with appeals will run more smoothly with 
the Outline and Guideline, as they provide 
an Overview of what is to be generally ex- 
pected. Comments on their utility are wel- 
comed. 


Judith Keene 


Information 


What You Should Know about Freedom of Information and 
Protection of Privacy 


As part of the Information and Privacy Commissioner’s public education 
program, a package called: “What You Should Know about Freedom of Informa- 
tion and Protection of Privacy” will be released in February. 


The package is made up of three brochures: one which provides general 
information on freedom of information and protection of privacy in Ontario; 
one which addresses privacy issues; and a detailed booklet for those interested 
in more than basic information. Both the provincial and municipal applications 
of freedom of information and privacy legislation will be addressed. 


“The Balancing Act” 


“The Balancing Act”, a 15-minute video in VHS format, explains the rights and 
protections available under the Freedom of Information and Protection of Privacy 
Act, 1987. It also details the intent and philosophy of the Act as well as the role 
and function of the Information and Privacy Commissioner. 


Please contact the Office of the Information and Privacy Commissioner, address 
and telephone listed below, for complimentary copies of the brochures and the 
video. 
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The Newsletter is published quarterly by the Office of the Information 
and Privacy Commissioner. 


If you have any comments regarding the Newsletter or wish to be added 
to the mailing list, contact: 


Monica Zeller, Communications Officer 
Information and Privacy Commissioner/Ontario 
80 Bloor Street West, Suite 1700 

‘Toronto, Ontario 

MSS 2V1 


Telephone: (416) 326-3333 
Toll Free: 1-800-387-0073 
Fax: (416) 965-2983 


Cette publication est également disponible en francais. 
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